$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: svNeeEnL+Oe44ZrUlL+i75J8xx+WEDFzooxegS+QS6o= Subject key identifier: CD:AB:9E:54:26:5F:6C:8B:CC:73:CC:A1:A0:34:59:BB:61:40:28:A8 Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 4299DAA4983E43DB8F370EE331E7C1FA2FBE2754 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 0284 Signing time: Fri 17 Apr 2026 22:38:58 +0000 Manifest this update: Fri 17 Apr 2026 22:33:58 +0000 Manifest next update: Sat 18 Apr 2026 23:04:58 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: 3QsQ43rssm7Zbmg24aM9FsSPb5wapfY75myIay5VxB0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:99:da:a4:98:3e:43:db:8f:37:0e:e3:31:e7:c1:fa:2f:be:27:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Apr 17 22:33:58 2026 GMT Not After : Apr 18 23:04:58 2026 GMT Subject: CN=CDAB9E54265F6C8BCC73CCA1A03459BB614028A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:c4:5b:56:38:6c:3e:21:51:53:1e:5c:45: 75:70:1b:6b:7e:f5:19:47:3d:d0:c3:ce:72:39:0a: 39:3b:57:dc:7e:dd:fd:8e:41:ff:07:02:71:f4:de: 31:e4:c3:95:59:4a:83:11:fe:c7:50:4f:ad:fb:85: c1:f1:ee:94:66:95:8e:7d:1e:4d:f7:e9:5f:d3:02: dc:a1:d9:5d:77:f4:89:9a:21:06:94:57:6b:ca:45: dd:7f:fe:2c:c6:29:a3:70:5a:0b:32:7a:32:38:99: 6a:a1:33:99:28:76:48:80:45:ec:89:ba:86:31:f1: ac:3c:ff:7c:62:59:dd:bc:28:5e:c1:59:f4:65:18: 9c:ca:80:6b:30:3d:78:d3:37:7c:e0:3e:b0:98:22: a3:51:70:e1:2a:2a:c2:01:a2:48:ab:3d:0b:7a:5f: de:78:c1:10:99:7f:6e:cc:19:85:da:e5:05:7b:a2: b5:b5:61:6f:79:02:e2:02:8d:0f:a9:8a:6b:19:d0: 5b:54:db:2d:7b:9d:15:c7:86:4b:8a:be:a2:09:ff: ed:09:5b:bb:ea:9f:a6:5c:30:26:ea:a9:e1:63:47: 5c:f3:33:0d:8e:f9:d7:0e:98:ca:02:64:a2:95:0a: 14:0e:0c:e5:6d:72:96:62:7f:b2:30:5a:af:cc:81: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:9E:54:26:5F:6C:8B:CC:73:CC:A1:A0:34:59:BB:61:40:28:A8 X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e3:df:8b:ab:2d:28:80:2e:88:42:d6:d1:61:09:0b:90:89: 4e:8d:75:bc:f5:0b:40:f9:17:e9:48:4a:b1:3e:30:3f:a3:31: 16:e3:7d:eb:65:c4:17:ba:4d:b5:21:1b:54:90:8b:fd:5a:de: 2a:aa:23:f0:9e:60:a4:8d:29:8f:55:22:9e:a0:27:18:04:f3: 9d:0f:88:5c:75:be:1f:bb:c1:84:d4:12:20:a3:ba:31:0a:f9: bc:8e:8e:8f:06:9f:5a:0c:e9:c8:79:5a:e7:06:d1:8d:a2:1d: 62:26:1b:82:56:2e:af:03:a0:92:4b:52:0e:23:d0:63:a4:34: 81:a7:c2:14:eb:15:e1:7e:fe:2c:59:43:00:74:4b:06:99:b6: c5:36:c5:27:dd:f8:9c:30:3d:53:2b:76:6a:6c:a9:c0:8b:06: 4b:da:69:47:4e:dd:6f:34:31:97:79:0c:06:4a:4b:e0:8d:3c: dc:86:6f:95:d6:24:60:79:24:4a:ac:a5:16:86:8c:02:6d:c2: d9:70:39:3e:a7:d0:71:9c:87:dd:9e:dd:a1:ed:06:10:43:57: 77:4b:f6:3c:ad:78:42:41:6b:bc:17:27:60:b8:82:5d:35:42: 28:94:14:11:ef:60:96:82:f5:aa:f6:b3:6a:8c:ea:3f:92:1f: af:44:25:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQpnapJg+Q9uPNw7jMefB+i++J1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNjA0MTcyMjMzNThaFw0yNjA0MTgyMzA0NThaMDMxMTAvBgNV BAMTKENEQUI5RTU0MjY1RjZDOEJDQzczQ0NBMUEwMzQ1OUJCNjE0MDI4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5W8RbVjhsPiFRUx5cRXVwG2t+ 9RlHPdDDznI5Cjk7V9x+3f2OQf8HAnH03jHkw5VZSoMR/sdQT637hcHx7pRmlY59 Hk336V/TAtyh2V139ImaIQaUV2vKRd1//izGKaNwWgsyejI4mWqhM5kodkiAReyJ uoYx8aw8/3xiWd28KF7BWfRlGJzKgGswPXjTN3zgPrCYIqNRcOEqKsIBokirPQt6 X954wRCZf27MGYXa5QV7orW1YW95AuICjQ+pimsZ0FtU2y17nRXHhkuKvqIJ/+0J W7vqn6ZcMCbqqeFjR1zzMw2O+dcOmMoCZKKVChQODOVtcpZif7IwWq/MgYVpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzaueVCZfbIvMc8yhoDRZu2FAKKgwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe+Pfi6stKIAuiELW0WEJC5CJTo11vPULQPkX6UhKsT4wP6MxFuN962XEF7pN tSEbVJCL/VreKqoj8J5gpI0pj1UinqAnGATznQ+IXHW+H7vBhNQSIKO6MQr5vI6O jwafWgzpyHla5wbRjaIdYiYbglYurwOgkktSDiPQY6Q0gafCFOsV4X7+LFlDAHRL Bpm2xTbFJ934nDA9Uyt2amypwIsGS9ppR07dbzQxl3kMBkpL4I083IZvldYkYHkk SqylFoaMAm3C2XA5PqfQcZyH3Z7doe0GEENXd0v2PK14QkFrvBcnYLiCXTVCKJQU Ee9gloL1qvazaozqP5Ifr0Ql/w== -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:13 2026 by rpki-client